• Approvals: Act as a gatekeeper for sensitive access and firewall rule approvals, ensuring compliance with security policies and business needs. • Reviews: Conduct regular reviews of access permissions, firewall configurations, and IT infrastructure settings (e.g., AD, Intune, Office 365, Azure) to ensure adherence to security best practices and expectations. • Architectural Review and Change Management: Review and approve all proposed changes to the IT infrastructure, ensuring changes do not compromise security integrity. • Testing: Conduct vulnerability scans at both regional and laboratory levels, overseeing remediation efforts. Collaborate with Group Security to facilitate penetration testing as required. • Incident Response: Assist in the investigation of security breaches and provide support for security intelligence reported by the Group Security Operations Center (SOC). • Advisory Role: Work closely with newly acquired laboratories to enhance their security posture, leveraging internal security standards and the expertise of a Senior Security Analyst. Evaluate the security of both in-house and externally developed applications, providing recommendations for security enhancements. • Reporting: Contribute to the development of operational security Key Performance Indicators (KPIs) and offer recommendations for improvement based on data analysis and industry best practices. • Vulnerability Management: Oversee the vulnerability management process for our entire infrastructure, ensuring timely identification, prioritization, and mitigation of vulnerabilities.

Role Description Our customers don't just need a platform that tracks their GRC program. They need a trusted voice who can help them think through it. As a Senior GRC Analyst, you'll be the person customers turn to when a risk assessment gets complicated, an audit raises an unexpected question, or a policy needs to be adapted to their specific environment. This role goes beyond process execution and platform support. You'll bring real GRC judgment to every customer interaction, recognizing when a question is more complex than it looks, and guiding customers through it with the confidence of someone who has actually done this work before. What You'll Do - Serve as a hands-on GRC advisor for a portfolio of customers, guiding them through risk assessments, risk registers, audit preparation, and control rollouts. - Help customers prepare for and navigate audits (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, and similar frameworks), translating requirements into practical next steps. - Advise on policy development and control design tailored to each customer's risk profile and maturity level — not just “what the framework says,” but what actually makes sense for them. - Spot GRC complexity early — recognizing when a customer's question touches on risk, compliance, or audit nuance that needs more than a standard playbook answer. - Partner closely with Support and Customer Success to own the escalations that require real GRC expertise, not just product knowledge. - Turn recurring customer questions into scalable guidance — playbooks, internal knowledge base content, and best-practice frameworks the whole team can use. - Act as the voice of the customer internally, flagging where our platform could better support real-world GRC workflows. Qualifications - 5+ years of experience as a GRC analyst, consultant, or coordinator — in-house, at a consulting firm, or in a similar capacity. - Direct, hands-on experience with audits, risk assessments and risk registers, and policy rollouts — you've been in the room, not just read about it. - Working familiarity with common frameworks (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, or similar) — deep specialization isn't required, but you should be able to orient quickly in any of them. - An instinct for GRC complexity: you can tell when something is more nuanced than it first appears, and you know how to break it down for someone who's stuck. - Strong consultative communication skills — you can explain a compliance concept to a nontechnical stakeholder without losing the substance. - A genuine interest in helping customers solve problems, not just closing tickets. Requirements - Certifications such as CISA, CRISC, CGRC, or ISO 27001 Lead Implementer/Auditor. - Experience working directly with a GRC software platform (as a practitioner, implementer, or vendor-side consultant). - Exposure to multiple industries or company sizes, giving you a broader sense of how GRC programs vary in practice. Benefits - Competitive salary and meaningful equity participation at a Series A inflection point. - Comprehensive paid benefits, including health insurance, 401(k), and generous leave policies.

Role Description Client is in need of a resource with strong Active Directory, Entra ID, security Operations, Security provisioning engineering and PAM experience to join the team. This team is responsible for many different things to include stabilization and correction on going and persistent issues, automation, working from a queue and new projects. Should be great at working with a team, developing relationships and collaboration. Key Responsibilities - Support and administer Active Directory (AD) and Microsoft Entra ID environments. - Assist with identity provisioning, deprovisioning, and access management processes. - Support and maintain Privileged Access Management (PAM) solutions. - Develop and enhance automation scripts and workflows to reduce manual effort. - Troubleshoot and resolve identity, authentication, and access-related issues. - Participate in security operations activities, including incident investigations and vulnerability remediation efforts. - Support ongoing stabilization and remediation of recurring security and identity issues. - Work closely with team members on operational tasks, project work, and continuous improvement initiatives. - Identify opportunities to streamline processes and improve security controls. - Document procedures, solutions, and operational processes. Preferred Qualifications - Experience automating repetitive administrative or security-related tasks. - Exposure to Microsoft security and cloud technologies. - Basic understanding of security best practices and access controls. - Experience supporting enterprise-scale environments. Ideal Candidate The ideal candidate is someone who enjoys learning new technologies, improving inefficient processes, and using automation to solve problems. We're looking for a self-starter who: - Has a strong identity and security foundation. - Enjoys scripting and automation. - Thinks proactively about process improvements. - Works well within a collaborative team environment. - Can balance operational support work with engineering-focused initiatives. Top Required Skills - Active Directory (AD) - Microsoft Entra ID - Automation/Scripting (PowerShell, Python, etc.) - Privileged Access Management (PAM) Job Type & Location This is a Contract position based out of Madison, WI. Pay and Benefits The pay range for this position is $30.00 - $34.00/hr. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: - Medical, dental & vision - Critical Illness, Accident, and Hospital - 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available - Life Insurance (Voluntary Life & AD&D for the employee and dependents) - Short and long-term disability - Health Spending Account (HSA) - Transportation benefits - Employee Assistance Program - Time Off/Leave (PTO, Vacation or Sick Leave) Workplace Type This is a fully remote position. Application Deadline This position is anticipated to close on Jul 21, 2026.

• Create innovative, thought provoking, and highly leveraged “must-have insights” content • Develop new insights and ideas through thought leadership • Develop in-depth analysis to identify root causes and drive strategy forward • Demonstrate thought leadership across a team of analysts • Research, analyze, and predict market trends • Provide actionable advice aligned to designated content area via interactions • Create and deliver high value presentation materials • Provide sales support to drive engagement with clients • Build credibility as an industry expert • Actively participate in innovation, ideation, and research discussions • Identify research process improvements or develop new processes • Be a mentor and coach for junior team members • Client-centric approach to engage clients regularly